Security
فارسی
All products

Red Hat OpenShift GitOps/openshift-gitops-kam

Red Hat · Package
35 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
golang.org/x/crypto/ssh Denial of service via crafted SignerCVE-2022-27191 · GHSA-8C26-WMH5-6G9VVersion ranges need review. golang.org/x/cryptoMigration Toolkit for Containers/cpma GoRed Hat High Fix reported
Incorrect sanitization of forwarded query parameters in net/http/httputilCVE-2022-2880 · GO-2022-1038 stdlibMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9 GoRed Hat Medium Fix reported
Memory exhaustion when compiling regular expressions in regexp/syntaxCVE-2022-41715 · GO-2022-1039 stdlibMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9 GoRed Hat Medium Fix reported
Failure to strip relative path components in net/urlCVE-2022-32190 · GO-2022-0988 stdlibNode HealthCheck Operator/workload-availability/node-healthcheck-rhel8-operator GoRed Hat Medium Fix reported
Excessive memory allocation in net/http and net/textprotoCVE-2023-24534 · GO-2023-1704 stdlibNode HealthCheck Operator/workload-availability/node-healthcheck-rhel8-operator GoRed Hat Medium Fix reported
Improper sanitization of CSS values in html/templateCVE-2023-24539 · GO-2023-1751 stdlibMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-rhel8-operator GoRed Hat Medium Fix reported
Insufficient sanitization of Host header in net/httpCVE-2023-29406 · GO-2023-1878 stdlibMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-rhv-populator-rhel8 GoRed Hat Medium Fix reported
golang.org/x/net/http2 vulnerable to possible excessive memory growthCVE-2022-41717 · GHSA-XRJJ-MJ9H-534MVersion ranges need review. golang.org/x/net/http2golang.org/x/net GoRed Hat Medium Fix reported
Improper handling of HTML-like comments in script contexts in html/templateCVE-2023-39318 · GO-2023-2041 stdlibCost Management Metrics Operator/costmanagement-metrics-operator-container GoRed Hat Medium Fix reported
Backticks not treated as string delimiters in html/templateCVE-2023-24538 · GO-2023-1703 stdlibNode HealthCheck Operator/workload-availability/node-healthcheck-rhel8-operator GoRed Hat Medium Fix reported
Improper handling of special tags within script contexts in html/templateCVE-2023-39319 · GO-2023-2043 stdlibCost Management Metrics Operator/costmanagement-metrics-operator-container GoRed Hat Medium Fix reported
Large RSA keys can cause high CPU usage in crypto/tlsCVE-2023-29409 · GO-2023-1987 stdlibNode Maintenance Operator/workload-availability/node-maintenance-rhel8-operator GoRed Hat Medium Fix reported
Improper handling of JavaScript whitespace in html/templateCVE-2023-24540 · GO-2023-1752 stdlibCustom Metric Autoscaler operator for Red Hat Openshift/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel8 GoRed Hat High Fix reported
Excessive resource consumption in net/http, net/textproto and mime/multipartCVE-2023-24536 · GO-2023-1705 stdlibNode HealthCheck Operator/workload-availability/node-healthcheck-rhel8-operator GoRed Hat Medium Fix reported
Infinite loop in parsing in go/scannerCVE-2023-24537 · GO-2023-1702 stdlibNode HealthCheck Operator/workload-availability/node-healthcheck-rhel8-operator GoRed Hat Medium Fix reported
Memory exhaustion in QUIC connection handling in crypto/tlsCVE-2023-39322 · GO-2023-2045 stdlibCost Management Metrics Operator/costmanagement-metrics-operator-container GoRed Hat Medium Fix reported
golang.org/x/net vulnerable to Uncontrolled Resource ConsumptionCVE-2022-41723 · GHSA-VVPX-J8F3-3W6HVersion ranges need review. golang.org/x/netstdlib GoRed Hat High Fix reported
Excessive resource consumption in mime/multipartCVE-2022-41725 · GO-2023-1569 stdlibNode HealthCheck Operator/workload-availability/node-healthcheck-rhel8-operator GoRed Hat Medium Fix reported
Panic on large handshake records in crypto/tlsCVE-2022-41724 · GO-2023-1570 stdlibNode HealthCheck Operator/workload-availability/node-healthcheck-rhel8-operator GoRed Hat Medium Fix reported
Panic when processing post-handshake message on QUIC connections in crypto/tlsCVE-2023-39321 · GO-2023-2044 stdlibCost Management Metrics Operator/costmanagement-metrics-operator-container GoRed Hat Medium Fix reported